I'd like to use GitHub Actions to deploy to my DO droplets without messing with SSH keys: https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect

Apparently AWS and GCP already support OIDC.